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WGOO/10068 PCT/US99/18356 
APPABATUS FOR AND METHOD OF ELECTRONIC CURRENCY 

GENERATION, TRANSFER AND REDEMPTION 



I. BACKGROUND OF THE INVENTION 

5 The present invenrion is directed to an apparatus for, and a method of, digitally 

transferring electronic currency. Currency substitutes are not new. Present currency 
substitutes include credit cards, debit cards, checks and traveler's checks. Each of these 
substitutes requires that a user's idenrificarion, as well as other forms of account 
information, is provided widi the transaction. Transferriug user account information 

10 increases the likelihood of dicft and increases die number of dieft prevention and fraud 
detection measures that are required for a a reliable currency substitute. 

Internet commerce and personal electric commerce has been hindered by people's 
reluctance to transmit account information and identification information widi each 
15 transaction. For example using cash one can walk into a store and purchase an item 
witiiout die store or anyone knowing xhc person's name, household address, bank and 
bank account number. Digital commerce is hindered by its lack of ability to maintain 
just such anonymous forms of financial transfers while at the same time providing an 
acceptable guarantee diat the currency substimte is legitimate and redeemable. 



20 



Prior systems, such as diat disclosed in United States Patent 5,757,917 use a complex 
system of networks, confirmation codes and autiiorization codes. This system requires 
that user obtain a cardholder account witii the issuing institution. This deprives die 
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user 



of maintaining transaction anonymity as the system verifies each transaction against 
the user's account information. The system thus knows that user 1 purchased a loaf of 
bread at a bakery that is likewise registered with die system. This system prevents 
commerce between wired and non-wired individuals. That is electronic commerce is 
5 not permitted to flow to users that are not pre-registered witii die system. 

Other forms of Electronic Currency are set forth in Cybercash's Lesson in Web Survival, 
New York Times August 10, 1998. The article discloses a Secure Sockets Layer system 
and a Digital Wallet system. In bodi systems, user's credit card information is 
10 transmitted back and fordi. In die Secure Socket Layer system a user provides his credit 
card number which is encrypted and sent to die merchant. The merchant receives and 
decrypts die information. The merchant dien encrypts and sends data to die credit card 
company. The credit card company opens the data and charges the user's account. In 
die Digital WaUet system, die digital waUet contains all of die user's credit card numbers 

15 and encrypts one of diem. The encrypted credit card is sent to die merchant. The 
merchant cannot read the credit card number but can read related transactional 
information. The information is forwarded to die credit card company who decrypts 
die credit card information and charges die user's account. In bodi of diese systems, 
die user's credit card information is transferred. The present invention is designed to be 

20 used without transferring this infomration. 

iSioreovcr, all forms of electronic commerce heretofore proposed are based on a 
network form of audiorization, most notably die internet, diat all such transactions 
occur over it. Aldiough perhaps good in intention, diese systems are creating two 



i 
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societies, those wired with credit card accounts capable of engaging in electronic 

commerce and those that are not. Aay electronic commerce must be usable and 
accessible by all segments of the society. It must be accessible by an iimer city youth 
selling newspapers just as it must be accessible to a corporate vice-president who is fiilly 
5 wired. 

The present invention solves these and other problems. The present invention permits 
anonymous users to receive an electronic currency substitute without first being 
registered or otherwise authorized, and transfer the electronic currency witiiout 
10 otherwise having account information transferred therewidi. A simple storage device is 
also disclosed that can be used to engage in electronic conmierce transactions without 
being wired into a computer network, for example by our mythical newspaper sales 
person. 

15 Some of the problems to be overcome include: permitting multiple methods of currency 
creation; creating freely transferable electronic currency that does not require user 
identification; preventing user counterfeiting and non-user counterfeiting; and 
providing a changeable standardized strucrure electronic currency format. 

20 The present invention is designed to overcome these problems and provide an electronic 
form of commerce that provides acceptable levels of security while at the same time 
permitting anonymous electronic transfers of money substitutes. In particular, the 
present invention comprises a new form of electronic money, new forms of electronic 
counterfeit protection, a new storage device thzt may, but which does not have to be, 
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used with this new form of electronic currency, an electronic currency generator and an 
apparatus for tracking incoming cash reserves. 

With these and other objectives, advantages and features of die invendon xhzt may 
5 become apparent, die nature of die invention may be more clearly understood by 
reference to the following detailed description of die invention, die appended claims, 
and to the several drawings attached herein. 

n. DRAWINGS 

10 Figure 1 is a schematic diagram of an Electronic Currency Unit (ECU); 

Figure 2 is a flow chart for issuing ECU; 

Figure 3 is a schematic diagram of ECU structure; 

Figure 4 is a flow chart of ECU generation; 

Figure 5 is a flow chart of ECU generation; 
1 5 Figtire 6 is a flow chart of ECU generation; 

Figure 7 is a schematic diagram of ECU structure; 

Figure 8 is a schematic diagram of ECU structure; 

Figure 9 is a schematic diagram of an ECU storage device; 

Figure 10 is a logic chart for ECU transactions; 
20 Figure 1 1 is a schematic of an ECU issuing device; and 

Figure 12 is a schematic diagram of an ECU network. 
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m. DETAILED DESCRIPTION OP THE DRAWINGS AND OF THE 
PREFERRED EMBODIMENT 

A detailed description of the invention, including a description of the preferred 
embodiment, is set forth below. 

5 

The present invention comprises several diflferent products and methods that are 
designed for use alone or in combination widi the system described herein. Those of 
ordinary skill in the art wiU recognize that these products may be categorized in a 
number of diflferent ways. For the purposes of this appUcauon the following categories 
10 WiU be used: Electronic currency; Storage device; Transaction program; Issuing module; 
Redemption module; and Network maintenance module. 

A. Electronic Currency 

The electronic currency unit (ECU) is the basic building block upon which other 
15 aspects of the invention are based. Current forms of electronic currency suflFer from 
their inability to be used in a transaction without identifying die parties to the 
transaction. The present invention solves this problem by using multiple identifiers and 
encryption techniques. 

20 ECU 1 at its most basic level may consist of a unique algorithm stored on a tangible 
electronic storage medium 2. a floppy disc at its most basic. A unique algoritiim 
ftmctions as a serial number and a given denomination. When die algoritimi diat is 
generated is issued, its value is noted for redemption. Fig 2 . An ECU can be issued for 

5 
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anything 

or intangible assets. Single algorithm ECU is likely to create storage problems. The 
length and complexity of the algorithms that are needed will continue to increase the 
n.ore ECU is used. Although, algoriduns are useful as serial number to identify each 
ECU, their use as a denomination identifier can make transactions difficult. Parties have 
no way of verifying daat an ECU is ti.e denomination claimed witi^out redemption or 
verificarion by die issuing mstitution. 

To solve tius problem a system of multiple identifiers, which may be algoritiuns, may be 
used. A denomination identifier 3 is combined witii a serial number identifier 4 . Fig. 
3. Denomination identifiers may vary by issuing institution as well as by time. For 

example rati^er than provide a currency with a numerical representation of a fixed 
amount such as $20, ti.e denomination identifier may comprise an algoritim., ti.e lengd^ 
of which may vary, dxat is recorded as representing S20. The abihty to vary 
denomination identification as a function of serial number and/or time increases 
security. Denomination correlation tables, which show what amount a denomination 
identifier corresponds to, may be made pubUdy avaUable. Fig. 4. 

If two different identifiers are used, an encryption algoritiun may be appUed to one or 
0 bod.. The use of ti.e term encr^^don refers to standard encryption as weU as any 

formatting of data such that only intended users have access thereto. This permits ti.e 
electromc currency to be transferred while reducing tampering or changmg of die 
currency. Fig 5. A duel identifier may be used for ti.e denomination, serial number or 

both. 
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A two key type system of encryption and decryption is used, such as widi a PGP 
encryption scheme, the safety of the electronic currency may be increased even further. 
In a two key encryption system, one key is used for encryption and one key is used for 
5 decryption. A user can only decrypt an item that has been encrypted widi the 

corresponding encryption key. Access only to the encrypting key does not permit the 
user to decrypt. Recipients wanting to verify some minimal identifying information 
about the currency may use publicly avaUable decryption keys to gain access to portions 
of die encrypted currency showing denomination information. Fig. 12 shows a pubHc 
10 verification metiiod. PubUc verification keys are made avaUable to user over telephone 
lines or the internet. The user receives die keys and determines the currency's 
audienticity. A re-encryption key may also be provided. If a re-encryption key is not 
provided, only a copy of the ECU is decrypted during transaction. Fig.6. 

15 A two-key encryption scheme also assists in preventing tampering by requiring re- 
encryption after decryption. The re-encryption keys are also publicly available and may 
change over time. In oriicr words, aldiough multiple pubUc decryption keys may be 
avaUable to decrypt ECU, only die latest re-encryption key is avaUable. This ensures 
that aU ECU diat is re-encrypted is also updated in time. Older keys may be phased out 

20 as a fiincrion of time, thus encouragmg users not to hold ECU for extended periods of 
rime widiout storing in an autiiorized institution. Altiiough a counterfeiter may be able 
to decrypt an ECU and change die denomination, the counterfeiter is unUkely tO be 
able to re-encr>Tt die currency. Constandy changing re-encryption and decryption keys 
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wiU further limit the time period during which a counterteiter vviU be able to undermine 
the currency substitute system and cause damage, if successful. 

Multiple duel key encryption permits can also be used, a first level of denomination 
5 information to be accessed whUe not providing access to the entire denomination 
identifier. Two level duel key encryption permits die lowest level of security to be 
publicly accessible. Users have access to die pubUc decryption and re-encryption keys. 
The second level is a secure level tiiat is only to be accessed by tiie issuing and 
redemption institution. A third level can also be provided. Issuing institutions may 
10 provide designated merchants with access to a decryption and re-encryption key to 

provide point of purchase verification greater than dxat available to die public while not 
giving up ultimate access to die ECU. This merchant-level multiple duel-key 
encryption form may be provided to die merchants daily, weekly or for each purchase 
depending on how often die issuing mstiturion changes encryption on new ECU being 
15 issued. 

1. Electronic Currency Header 

Widespread use of ECU can be hampered by requirements for uniformity. If multiple 
institutions are able to issue ECU and die users are able to fireely exchange different 
20 types of ECU, die ECU system eidier has to be of a uniform structure or provision tor 
non-uniform strucmres must be made. 
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A preferred option in the ECU is the ability for different institutions to have different 
ECU structure. To enable this option ±e ECU is provided vvith a header 5, a table of 
contents of the ECU. A standardized header identifies, issuing institution type, the 
location of information and/or the number or web address to contact for different 
5 levels of verification information. Additional information can also be provided. 

ECU may vary from issuing institution to issuing institution so long as certain standards 
are maintained. AU ECU must have a value identifier and a denomination, which may 
be combined or separate. Multiple denomination identifiers may be used but at tiie very 
10 least a single denomination identifier must be present. In addition, the ECU must 
either contain or be operational with a basic transfer program that at the very least 
copies an ECU and deletes the original copy. 

Different ECU types and formats arc made compatible by using a header attached to die 
15 ECU, preferably at each level of encryption. The identification header tells die transfer 
programs where the currency information is contained. For example, die first five bits 
of die currency header may be used to identify where die basic denomination 
information is contained, die header may dien identify if any .program information, such 
as time dependency, devaluation abifity or multi-encryption, information is contained in 
20 die ECU and where die data is. A second header 6, encrypted widiin a second layer 7 
of serial identifier or denomination identifiers, may contain information about diat level 
of data as weU as die level before it. The second level header may contain selected 
verification mediods, such as die location and value of a string on data in die first level 
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of data. If the data in the second header does nor match that present in the first data, 

tampering may be present. 

Re-organizing ECU structure may be used as yet another basic verification tool or 
5 identifier of the merchant or institution that took part in a transaction. The 

organization of a given ECU may contain information as to the currency's authenticity. 
For example, a known merchant may interleave denomination and serial number 
identifiers using a predetermined pattern. These patterns may change over time. 



2. Electronic Currency Exchange Rates 

As ECU is stored on a storage medium, size of the ECU is an issue. While the level of 
security for various sized denominations may change, hence changing the relative size of 
the various denominations, ECU size may still become a factor hampering its everyday 
use. For example, the security protection for a twenty-five cent denomination may be 
relatively low; The size may still prohibit a portable holding device from carrying one 
hxmdred dollars worth of twent\'-five cent denominations. This is acceptable to most, if 
not all users. 

ECU size is more of an issue when change needs to be made or transmitted. One 
20 solution to this problem is to have an exchange rate module built into the transaction 
program, described in detail below. The transaction module will in effect devalue the 
highest valued ECU by creating multiple identical with exchange rate/devaluation rate 
information encrypted into the ECU. For example, a hundred dollar denomination 

10 
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mav de devalued through the creation of one hundred idenacal denonunaaons each 
containing an encrypted exchange rate of 1/100. It should be noted that aU devalued 
ECUS do not have to be devalued uniformly, non-uniform devaluation is contemplated. 
For most transactions this method may not be preferred as it provided the increased 
encryption associated with a one hundred doUar denomination on lower denomination 
values tiiat otherwise would not be so heavUy encrypted. Increased size of devalued 
ECU may also be purposefuUy introduced to encourage timely redemption or exchange 
of all devalued ECU . 

It should be noted here however diat die denomination algoridim might also include an 
exchange rate portion for transaction between ECUs base don different currency bases. 
International exchange of currency is tirus easUy faciUtated. 

3. Security Options 

Altiiough some security options have been discussed above, additional security options 
for ECU are available. 

Counterfeit prevention used in traditional forms of currency is hampered by time. That 
is, once currency is released it may not be revoked unless a new currency is issued to 
replace it. Even tiien unless all old forms of die currency are rendered void, a period of 
overlap wiU exist. Old currency may always resurfoce. ECU solves this problem by 
offering a time dependent feature. 
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ECU may be rime dependent, such rfiat it has a life span. In its most crude form, the 

encryption keys may be phased out rendering ECU useless. For example, each public 

key may have a life of one month. If ECU is not decrypted and re-encrypted each 

month, it becomes stale and is rendered useless. 

5 

Time dependent ECU may have a short life span of a long life span. ECU may also be 
generated with a time sensitive program such that the denomination amount is varied as 
a function of time. This feature provides for interest or other increases in an assets 
valuation to change automatically as a function of time. Alternately, long living EVU 
10 that correspond to stocks or any asset whose value fluctuates may constantiy update the 
value of the ECU base don the latest information provided to the ECU. In this case 
changes in value may involve an increase in the denomination amount. 

ECU may also be embedded in, or contain embedded, programs that are self-executing, 
15 such as a time dependent computer virus. A time sensitive program can be attached to 
or embedded in the ECU that limits the life of the currency, thus requiring the user to 
periodically store the ECU in an authorized depository that is capable of ECU re- 
generation or re -issue. Multiple forms of time dependency may be used. The 
embedded self-executing program may activate after one month has expired in 
20 combination with public key time dependency. 

Time sensitive currency may be used to force ECU back through the issuing network to 
gauge its authenticity and the level of counterfeiting and ECU in circulation as a 
function of assets available for redemption. 

12 
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The encryption of a self-destruct program or virus may also be used by issuing 
institutions to guard against counterfeiters. 



5 Institution independence creates a degree of uncertainty that may be used by 
institudons to periodically vary the basic construction of the ECU and prevent 
counterfeiting. 

In a preferred embodiment the ECU will contain three denomination identifiers and 
10 three serial number identifiers. A first layer of two key encryption will be applied to the 
first denomination and first serial number identifiers. Prior to encryption, additional 
protection may be obtained by interleaving the two identifiers based on yet another 
algorithm or pattern. A second denomination and serial number packet is made and 
attached to the first encryption packet together with a header that identifies the second 
15 packet information's location. The header contains a small data string and its location 
in the first encrypted portion for tamper identification. A duel key encryption is applied 
to this packet. A third denomination and serial number packet is made and attached to 
the second encryption packet together with a header that identifies the second packet 
information's location. This third packet is then encrypted using a single key 
20 encryption. A header identifies the issuing institution and denomination information. 
For basic securit\% a recipient uses known institutional encryption keys to de-encrypt the 
ECU and verify its denomination and serial number. For transactions with pre- 
registered vendors, the second encryption packet may be accessed. The duel key 
encryption ensures that only authorized vendors with access to both encryption and de- 

13 
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encryption information access this second packet. Finally, the third packet is provided 
for institutional use only. The level of encryption may be varied depending on memory 
constraints. 

5 B. Storage devices 

ECU is stored on any form of generally available storage medium, including but not 
limited to ROM, RAM, DRAM, SRAM, floppy disc or hard drive. Optical storage 
devices may also be used to reduce inadvenent destruction of ECU by magnetic 
fluctuations. In essence, any electronic or optical storage medium may be used. If the 
10 ECU is not on a storage medium it is in a transfer stage between two storage medium. 



Storage medium may come in a variety of forms from ECU on a floppy disc, that is 
physically transferred, to a ponablc ECU storage device to an ATM machine equipped 
to receive and dispense ECU to a hard drive in the issuing institutions operation. 

15 

Network storage in accounts or depositories is perhaps the safest form of ECU storage. 
Network storage may comprise, at its most a basic, a form of electronic safe deposit 
boxes that are backed up and adequately protected against inadvertent destruction. 
Network storage can be implemented on a user anonymous basis. Users are allocated 
20 disk space to store their ECU. The rype. and amount of ECU does not need to be 

determined by the storage device unless some form of disaster insurance is required or 
the amount of ECU is required to be known for the transaction. Re-encryption for 
time-dependent ECU can be built in. It is contemplated that the storage networks may 

14 




wo 00/10068 PCTAJS99/18356 
be established to operate automatically, deducting the cost of storage directly from the 

stored ECU. ECU monitoring can be tied in with the network storage such that the 

information concerning the existing ECU pool is periodically made known, such as 

amount, type, issuing institutions, etc. 

5 

Fig. 9 shows a typical storage device. The device 8 has an input port 9 that may 
comprise a bus or infrared electronic transfer signal reception device. A standardized 
bus is preferable provided that has both male 10 and female bus 11. This permits any 
two devices to be connected simply by inverting one of the devices. A digital signal 

10 processor 12 is connected to the BUS 9 that is in turn connected to a memory device 
13 and a power supply 14, Multiple memory devices 13a & 13b may be provided all, or 
some of which, may be removable. An authorization code memory or public key 
memory 15, which may be connected to an input device, such as a modem or network, 
is also provided in memory 13 or as a separate memory. A transaction log memory may 

15 also be provided. A processor 16 is also provided and is connected to a digital signal 
processor, memory and network devices. The device may be designed to be handheld 
or it may be incorporated into an ATM machine. Devices that are in fixed locations 
may benefit from dedicated connections to an authorization server that is used to 
distribute ECU information. 

20 

ECU cash registers and elccuonic currency ATM machines likewise contain similar 
storage devices. In such cases, the transaction is also tied into traditional forms of 
currency. The storage medium is thus tied into a processor, which may likewise be tied 

15 
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into a network through a modem etc. The network connection may be periodic or 

constant depending on the transactions anticipated and the level of security required. 



C. Transactions 

5 Transactions can be carried out in a number of different ways. The level of security 
required by the users will govern, at least in part, the steps that will be taken. In a basic 
transaction an ECU will be transferred from one storage unit, say a hand held device, to 
another. In this case, the two devices are attached. A reversible connector with male 
and female connectors is ideally provided on all storage devices such that one device 
10 may be turned upside down and connected. 

The transferring machine designates the ECU to transfer though an input device. Fig. 
10. A touch pad or similar input device maybe used. An execution key is then pressed. 
The receiving device may be placed in the reception mode or the exact amount of ECU 

15 being transferred may be input for additional securit\\ The transferring device first sets 
up a mutual connection with the reception device. If the mutual path is terminated or 
tampered witii during the transfer the transfer is cancelled. A standard communication 
path is created. The transferring unit searches its memory and locates the ECU to be 
transferred. This information is transmitted to the receiving device. The receiving 

20 device copies the ECU into its memory and erases the original ECU. The transaction is 
completed. Those of ordinary skill in the art will appreciate that the transfer and erase 
function can be carried out by either device or a combination of the two of them. 
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Ideally, the receiving device will transfer the ECU into an authentication memor\'. The 

receiving device will perform an initial analysis of the currency header to determine the 

type of ECU. A search is then initiated of die receiving device's authentication memory 

to determine if public decryption and re-encryption keys exist. If they do, the 

5 authenticity of the ECU can be determined. If the authenticity does not meet a user 

defined, or predetermined, threshold, the ECU is rejected. The ECU in the 

authentication memory is deleted and a rejection code is transferred to the transmitting 

machine. A rejection code is also stored in the receiving device. The rejection codes are 

stored in a transaction log that sores information relating to identifiers, time, money 

10 type, etc., which may be uploaded to the authentication server for processing. 

If the ECU is accepted, the receiving device transmits an erase command to the 
transmitting device to delete the ECU firom its memory. A log of the transaction is 
generated indicating that a currency unit was transmitted and accepted. Both machines 
1 5 may store this log information. 

If the transferring unit is unable to identify the correct denomination in its memory, it 
informs the receiving device of the need for change or devaluation. The receiving unit 
searches its memory to determine if change can be provided. If a transaction is possible 
20 the units proceed in the normal manner. After, receipt and acceptance of the 

transferring unit's ECU but prior to erasing of the transferring unit's memory, the 
receiving unit transmits the change. A similar verification process is performed. If both 
devices accept the transaction, the original ECU is erased firom both machines and the 
transaction is completed. 

17 




wo 00/10068 PCT/US99/18356 

A similar process may be followed for devalued ECU or use of an exchange rate. It 
should be noted that increasing value of an ECU is not permitted unless the device is an 
issuing institution. Exchange rate transactions are carried out in a similar manner. Prior 
5 to re-encryption by the receiving machine an exchange rate is inserted into the 

denomination field and the header is changed accordingly. Upon acceptance of the 
ECU, the transmitting machine erases the original currency'. The receiving machine 
then transmits copies of the re-encrypted currency to the transmitting device according 
the exchange rate and transaction amount. Both devices record the change in value in 
10 their logs. A copy of the ECU for non- transactional purposes may also be stored and 
transmitted to the user network. The user network will be described in detail below. 

ECU storage devices may also be provided with storage device identifier. The storage 
device identifiers may be fixed or may be changed each time authentication information 

15 is obtained. This identifier may be stored in the transaction log. The authentication 
key network may download transaction log information and process it for fi-audulent 
activity detection. If an ECU storage device is identified as having been tampered with, 
and or malfiinctioning, the ECU storage device information can be transmitted to ail 
ECU storage devices. During initial contact between two ECU storage devices, 

20 malfimctioning devices may be identified and the transaction terminated. This provides 
yet another level of security and firaud prevention. 
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The transaction program may also be built into an interactive TV. Alternately, an 

interactive or home shopping TV program may be use din conjunction with an internet 

connection or traditional telephone system to provide for ECU transactions. 



5 D, Issuing Device 

The issuing device in its most basic form may comprise a computer 17 and a storage 
device 18. As those of ordinary skill in the art will recognize the computing power 
necessary to generate more complex encryption may exceed that which is available to 
the vast majority of home -users . 

10 

An issuing institution should ideally have the following modules: serial number 
generation module; denomination generation module; currency generation module; and 
currency information storage module. Additional modules may include multiple 
currency and generation modules; encryption modules; program selection modules; 
15 currency re-generation modules; tracking module; multi-level authorization module; 
and asset allocation module. 

System security and asset allocation are the two key modules to a successful ECU 
system. The issuing institution must also be able to redeem the ECU and in that regard 
20 must safeguard the assets that it has taken in. The asset may be invested in. a variety of 
commercially available instruments such that the issuing insritudon may generate 
supplemental assets. A supplemental assets management module may be operationally 
connected to the redemption and verification modules. This permits the supplemental 

19 
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asset management module to periodically predict the amount of funds that either will 

not be redeemed or will be fraudulendy redeemed. Asset allocation permits the 

supplemental assets to be invested such that the ECU system remains viable. 

Issuing institutions may use diflFerent currency generation programs so long as its ECU 
is created according to a given standard. Basic denomination identifiers and transaction 
routines must be standardized. The level of encryption may vary firom institution to 
institution. In that regard, an institution may chose to use one or multiple algorithms 
for denomination verification.* An issuing institution may chose to attach time sensitive 
software to each ECU 

E. Network 

The network 19 is used to provide the public with access 23 to currency information 
and encryption/decryption keys. The network is also used to collect log information. 
Any time a storage device 20 contacts the network for updated information the network 
may require a copy of the storage device's log. 

A network monitoring module 21 can be provided that tracks currency usage, including 
devaluation and rejected transactions. Rejected transactions can also be tracked based 
on the reason for rejection. For example if adequate change does not exist in the ECU 
pool, the issuing institutions 22 may be directed to issue multiple lower denomination 
notes to new user. 
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It should be noted that because generic public encryption keys are used, users do not 

need to be idcntiJSed when connecting their storage devices to the network. Once 

updated general authenticadon information is available, user's can engage in 

transactions anonymously without the transmission of user accoimt information. 

5 

With time dependent ECU periodic connection of all storage devices is ensured. The 
use of new re-encryption keys with the phasing out of old decryption keys will ensiure 
that devices that have not contacted the network in a reasonable amount of time are 
forced to check in. This periodic connection provides access to a variety of information 
10 that can be used to monitor and control the ECU trade. Devices that show a high 
degree of rejected transactions or other irregular transaction practices may be 
investigated. 

F. Redemption 

15 There arc different levels and t\^es of redemption. The transactions discussed above 
can be though of redemption if a non-ECU is paid for the ECU. Redemption in the 
context of this disclosure refers to the redemption of ECU to the issuing institution, or 
its aflfiliates, and the transfer of non-ECU originally exchanged for the ECU to the 
presenter. Redemption of ECU involves presenting a ECU to a receiving device that 

20 has access to aU decryption keys and asset reverses to pay the presenter. 

When redeeming ECU a transaction similar to that discussed above may be used. The 
level of authentication may vary from a full authentication to a partial authentication. 

21 
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The redemption devices is connected to the asset allocation module, either through as 

direct connection, network or though periodic updates, to register the redemption of 

ECU. 

ECU that has been redeemed may be re-used, including partial or tM re-encrypted. 

Those of ordinary skill in the art will recognize the wide commercial applicability of the 
invention set forth above. Those of ordinary skill in the art will recognize the large 
commercial use of the electronic currenc\^ apparatuses and methods described herein to 
the banking industry, to the electronic industry and to the internet commerce industry. 
Those of ordinary skill in the art will recognize that the invention herein described and 
claimed may be modified and is not limited to the specific embodiments herein 
described. 
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We claim: 

1. An electronic currency unit comprising: 

a storage device comprising a header containing information on the location of a 
denomination identifier and of a serial number identifier in a digital array, and a 
5 denomination identifier and a serial number identifier corresponding to said header 
information. 

2. An electronic currency unit as claimed in claim 1 fiirther comprising: 

a second denomination identifier and a second serial number identifier, wherein 
10 said second denomination identifier and said second serial number identifier are 
encrypted wth a first encryption. 

3. An electronic currency unit as claimed in claim 2 wherein said first denomination 
identifier and said first serial number identifier are encrypted with a second encryption. 

15 

4. An electronic currency unit as claimed 2, wherein said first encryption is a two 
key encryption method. 

5. A method for issuing electronic currency comprising the steps of: 
20 generating an electronic currency unit; 

assigning said electronic currency unit a value; 
recording said assigned value; 
issuing said electronic currency unit. 
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6. The method for issuing electronic currency as claimed in claim 6 further 

comprising the steps of: 

encrypting at least a portion of said electronic currency unit. 

7. The method for issuing electronic currency as claimed in claim 6 further 
comprising the steps of: 

transmitting encryption data to an electronic currency unit storage device. 

8 . A system for managing electronic currency comprising; 
an issuing module; 

a network module; and 
a redemption module. 

9. An electronic currency storage device comprising; 
an input port; 

a memor\^; 
a processor. 
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AMENDED CLAIMS 

[received by the International Bureau on 9 March 2000 (09.03.00); 
Original claim 6 amended; remaining claims unchanged (1 page)] 

6. The method for issuing electronic cxirrency as claimed in claim 5 further 
comprising the steps of: 

encrypting at least a portion of said electronic currency unit. 

5 

7. The method for issuing electronic currency a claimed in claim 6 fiirther 
comprising the steps of: 

transmitting encryption data to an electronic currency unit storage device. 

10 8. A system for managing electronic currency comprising; 
an issuing module; 
a network module; and 
a redemption module. 



15 9. An electronic currency storage device comprising; 
an input port; 
a memory; 
a processor. 
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AMENDED SHEET (ARTICLE 19) 



